Published: 01/07/2009 Updated: 02/09/2009

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 440

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Buffer overflow in compface 1.5.2 and previous versions allows user-assisted malicious users to cause a denial of service (crash) via a long declaration in a .xbm file. NOTE: this issue only affects compface on distributions that used a certain patch.

Vulnerable Product	Search on Vulmon	Subscribe to Product
james ashton compface 1.4
james ashton compface 1.5
james ashton compface 1.5.1
james ashton compface

Debian Bug report logs - #534973 compface: bufer overflow in xbm-file Package: compface; Maintainer for compface is Hakan Ardo <hakan@debianorg>; Source for compface is src:libcompface (PTS, buildd, popcon) Reported by: metalhoney@hushmailcom Date: Sun, 28 Jun 2009 17:12:01 UTC Severity: grave Tags: security Found in v ...

#!/usr/bin/perl ######################################################################### ####VIVA#ISLAM##################################################ALLAH#### ######################################################################### # compface <= 152 bufer overflow p o c # vuln only excist on debian and ubuntu? - packagesdebianorg/compf ...

#!/usr/bin/python #[*] Exploit : Compface 'xbm' Local Buffer Overflow Exploit #[*] Affected : compface 115 #[*] Tested on : Ubuntu 904 (without stack randomization) #[*] Refer : bid/35863 #[*] Exploit : His0k4 #[*] Use : $compface exploitxbm out #setuid/execve shellcode for Linux/x86 by Marco Ivaldi #[*] x86/alpha_m ...

CWE-119 http://www.openwall.com/lists/oss-security/2009/06/29/4 http://www.openwall.com/lists/oss-security/2009/06/29/2 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534973 http://www.securityfocus.com/bid/35863 http://www.openwall.com/lists/oss-security/2009/07/03/1 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534973 https://nvd.nist.gov https://www.exploit-db.com/exploits/8982/

CVE-2009-2286

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect